Abstract:According to the recent report, 12 000 new Android malware samples will be generated every day. Efficient identification of evolving malware is an urgent challenge. Traditional methods based on structured features such as permissions and sensitive application programming interface (API) calls lack high-level behavioral semantics to detect evolving malware. The methods based on call graphs (CG) are good at behavioral semantic analysis but face the problem of huge time and space consumption, which leads to low detection efficiency. In this paper, we propose a novel Android malware detection method based on the method-level correlation relationship of application's abstracted API calls. First, we split each Android application's source code into separate function methods and just keep the abstracted API calls of them to form a set of abstracted API calls transactions. And then, we calculate the confidence of association rules between the abstracted API calls, which forms behavioral semantics to describe an application. Finally, we combine machine learning to identify the different behavioral patterns of malicious and benign apps to build the detection system. The results of our empirical evaluation show our system is competitive in terms of classification accuracy and detection efficiency. At dataset Drebin (benign 5.9K and malware 5.6K) and AMD (benign 20.5K and malware 20.8K), our system has achieved 96% and 98% detection results both in accuracy and F-measure. Compared with the state-of-the-art system in detecting evolving malware called MaMaDroid on the dataset of 6.0K benign and 20.5K malicious samples spanning from 2010 to 2017, our system achieves higher accuracy while improving detection efficiency by 15 times (2.9 s versus 45.7 s per sample).

An Android Malware Detection Model Based on DT-SVM

A Dynamic and Static Combined Android Malicious Code Detection Model Based on SVM.

Android Malware Detection Based on a Hybrid Deep Learning Model

An Android Malware Detection Method Using Deep Learning Based on API Calls

Novel nature-inspired optimization approach-based svm for identifying the android malicious data

Research of Malware Detection Approach for Android

Android Malware Detection Method Based on Permission Complement and API Calls

An Android Malware Detection Method Using Multi-Feature and MobileNet.

A Hybrid Model for Android Malware Detection

Android-SEM: Generative Adversarial Network for Android Malware Semantic Enhancement Model Based on Transfer Learning

Investigating Feature and Model Importance in Android Malware Detection: An Implemented Survey and Experimental Comparison of ML-Based Methods

An Efficient Android Malware Detection System Based on Method-Level Behavioral Semantic Analysis.

Decoding Android Malware with a Fraction of Features: An Attention-Enhanced MLP-SVM Approach

Hybrid Sequence‐based Android Malware Detection Using Natural Language Processing

An android malware detection approach using multi-feature fusion and TF-IDF algorithm

Detecting Mobile Malware with TMSVM

DroidDet: Effective and Robust Detection of Android Malware Using Static Analysis along with Rotation Forest Model.

Two Effective Methods to Detect Mobile Malware

Droidetec: Android Malware Detection and Malicious Code Localization through Deep Learning

Effective and Explainable Detection of Android Malware Based on Machine Learning Algorithms

Droid-Sec: Deep Learning In Android Malware Detection